capybara-lightpanda 0.12.0 → 0.14.0

data/lib/capybara/lightpanda/process.rb

@@ -63,10 +63,10 @@ module Capybara
       # returns spec-correct booleans. Lets _lightpanda.isVisible detect
       # inline-@media-gated hides via el.checkVisibility() without any
       # gem-side workaround),
-      # PR #2487 (css: external <link rel="stylesheet"> fetch behind the
-      # --enable-external-stylesheets flag — build_args now passes that flag
-      # unconditionally, so the floor MUST include the build that introduced
-      # it; the flag is a fatal UnknownOption on builds < 6353),
+      # PR #2487 (css: external <link rel="stylesheet"> fetch behind a CLI
+      # flag — build_args passes it unconditionally, so the floor MUST include
+      # the build that introduced it; since #3305 (8946) the spelling is
+      # `--load-resources stylesheet`, see the 2026-09-06 bump),
       # PR #2498 (StyleManager: author display rule beats UA [hidden] — fixes
       # the Stimulus/Alpine dropdown ElementNotFound),
       # PR #2635 (dom: DOM.setFileInputFiles backs input.files + fires change
@@ -227,11 +227,44 @@ module Capybara
       #     and `localhost.evil.com:<port>` still 403). Below 8875 only an IP
       #     literal passed, so a user-supplied `ws_url:` had to say 127.0.0.1.
       #     Pinned by test/features/ws_url_host_test.rb.
-      # Build 8875 = the #3256 merge (f2169836e). NOTE: this floor leads the
-      # nightly channel — the 2026-08-26 nightly is 8855 — so it lands with the
-      # next nightly cut. #3267 (8880, Authorization stripped on cross-origin
-      # redirects) arrives with the same floor but drives nothing gem-side.
-      MINIMUM_NIGHTLY_BUILD = Gem::Version.new("8875")
+      # Build 8875 = the #3256 merge (f2169836e).
+      #
+      # 2026-09-06 bump 8875 -> 9058. The binding constraint is the lockstep
+      # with MINIMUM_RELEASE below: 9058 is exactly `git rev-list --count
+      # 0.4.0`, the newest tagged release, so this is as high as the nightly
+      # floor can go without naming a release that does not exist. Two fixes
+      # the gem now asserts on ride along:
+      #   #3298 (8937) Backspace/Delete through CDP Input.dispatchKeyEvent
+      #     actually edit an <input>/<textarea>: a trusted `beforeinput`
+      #     (cancelable) then `input` with inputType deleteContentBackward /
+      #     deleteContentForward, via the text_entry.zig mixin. Below 8937 the
+      #     keys were dead, so Node#send_keys(:backspace) silently did nothing.
+      #     Pinned by test/features/keyboard_editing_test.rb.
+      #   #3305 (8946) renamed --enable-external-stylesheets to
+      #     `--load-resources stylesheet` and --log-filter-scopes to
+      #     --log-filter; build_args now passes the new spelling, which is a
+      #     fatal UnknownOption below 8946. (The same PR flipped iframes and
+      #     workers off by default — Browser#configure_loading re-enables them
+      #     per BrowserContext, and did so before this bump.)
+      #
+      # 2026-10-03 bump 9058 -> 9994 (= release 1.0.0, the new lockstep cap).
+      # Retired or ungated by it:
+      #   #3375 (9071) option.selected deselects its siblings — SELECT_OPTION_JS
+      #     dropped its `sel.value =` detour, which selected the FIRST option
+      #     sharing a value rather than the one Capybara resolved.
+      #   #3378 (9207) matchMedia `change` fires on a viewport override —
+      #     viewport_test.rb's pin runs un-gated.
+      #   #3414 / #3420 / #3422 / #3424 (9217-9234, ours) trusted
+      #     `beforeinput` is cancelable; `.value =` moves the caret to the end;
+      #     a child-text <textarea> can be selected; arrows/Home/End move the
+      #     caret — the `send_keys should send special characters` skip is
+      #     gone and keyboard_editing_test.rb pins all four.
+      # Behavior changes the floor now guarantees, all compensated or
+      # Chrome-parity: #3654 (9883) CORS enforced by default (blocked requests
+      # end in Network.loadingFailed, which Network consumes); #3529 (9877)
+      # SameSite=None without Secure refused (Cookies#set reports it);
+      # #3702 (9968) click no longer focuses (CLICK_JS focuses itself).
+      MINIMUM_NIGHTLY_BUILD = Gem::Version.new("9994")
 
       # Second, equivalent floor for the *release* channel.
       #
@@ -240,21 +273,16 @@ module Capybara
       # bare "0.3.6" carrying no commit counter at all, and MINIMUM_NIGHTLY_BUILD
       # has nothing to compare against. Releases are cut from the same trunk, so
       # a release is acceptable exactly when its own commit count clears the
-      # nightly floor. As of 2026-08-26 NO published release clears the 8875
-      # floor — 0.3.7 (build 8671) predates every fix the floor exists for — so
-      # this pin names the NEXT release. 0.3.8 is not tagged yet; any future tag
-      # is cut from a trunk already past build 8886, so it clears the floor by
-      # construction. Until upstream tags it, the release channel is
-      # deliberately unusable (nightly-only), reported with the standard
-      # too-old error. When 0.3.8 ships: verify
-      # `git rev-list --count 0.3.8` >= 8875 and update the lockstep table in
-      # process_test.rb.
+      # nightly floor. 1.0.0 (2026-10-02) is build 9994 — exactly the nightly
+      # floor, which is no accident: the floor was raised *to* the release so
+      # both channels gate the same commit. (0.4.1 = 9463 and 0.4.0 = 9058
+      # predate fixes the floor exists for.)
       #
       # INVARIANT: every MINIMUM_NIGHTLY_BUILD bump must also move this to the
       # first release containing that build (`git rev-list --count <tag>` in the
       # browser repo tells you). Leaving it behind would let the release channel
       # silently accept a binary the nightly channel rejects.
-      MINIMUM_RELEASE = Gem::Version.new("0.3.8")
+      MINIMUM_RELEASE = Gem::Version.new("1.0.0")
 
       class << self
         # `lightpanda version` prints one of two shapes, and the gem supports
@@ -423,10 +451,6 @@ module Capybara
           @options.port.to_s,
           "--log_level",
           "info",
-          # External stylesheet fetch (PR #2487, build >= 6353 — enforced by the
-          # floor). Always on so linked CSS contributes to checkVisibility /
-          # getComputedStyle; see .claude/rules/lightpanda-io.md limitation #5.
-          "--enable-external-stylesheets",
           # Raise the inbound CDP WebSocket message cap from Lightpanda's 1 MiB
           # default (Config.zig `cdp_max_message_size`) to 100 MiB, matching
           # Chrome's inbound DevTools buffer. An inbound message over the cap is
@@ -441,12 +465,23 @@ module Capybara
           "--cdp-max-message-size",
           (100 * 1024 * 1024).to_s,
         ]
-        # Opt-in image fetching (upstream #3230, build >= 8834). Deliberately
-        # NOT always-on like --enable-external-stylesheets: images never feed
-        # the DOM predicates, so the default spends no bandwidth on them. On
-        # builds < 8834 the flag is a fatal UnknownOption at boot — see
-        # Options#load_images.
-        base.push("--load-resources", "image") if @options.load_images
+        # Sub-resource loading is one comma-separated `--load-resources` value
+        # (Config.LoadResources is a packed struct the CLI parser fills from a
+        # comma list — the flag is NOT repeatable). Every kind defaults OFF
+        # since #3305 (build 8946).
+        #   stylesheet — always on (PR #2487, build >= 6353) so linked CSS
+        #     contributes to checkVisibility / getComputedStyle; see
+        #     .claude/rules/lightpanda-io.md limitation #5. The spelling
+        #     `--load-resources stylesheet` is a fatal UnknownOption below 8946,
+        #     which the floor clears.
+        #   image — opt-in (upstream #3230, build >= 8834): images never feed
+        #     the DOM predicates, so the default spends no bandwidth on them.
+        #     See Options#load_images.
+        #   iframe / worker — deliberately NOT here. Browser#configure_loading
+        #     re-enables both over CDP (LP.configureLoading) per BrowserContext.
+        resources = ["stylesheet"]
+        resources << "image" if @options.load_images
+        base.push("--load-resources", resources.join(","))
         extra = ENV.fetch("LIGHTPANDA_EXTRA_ARGS", "").split
         base + extra
       end

data/lib/capybara/lightpanda/version.rb

@@ -2,6 +2,6 @@
 
 module Capybara
   module Lightpanda
-    VERSION = "0.12.0"
+    VERSION = "0.14.0"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: capybara-lightpanda
 version: !ruby/object:Gem::Version
-  version: 0.12.0
+  version: 0.14.0
 platform: ruby
 authors:
 - Navid Emad
@@ -129,7 +129,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.16
+rubygems_version: 4.0.20
 specification_version: 4
 summary: Capybara driver for the Lightpanda headless browser
 test_files: []